How to Set Up a Geofenced Time Clock (and Keep It Legal)

A geofence compares the coordinates your phone reports with a circle drawn around an address. Inside the circle, the punch goes through. Outside, the app either blocks it or lets it through with a flag for a manager.

That makes it useful for crews who move between sites, for delivery and field teams, and for anyone who might otherwise punch in from the parking lot of a different job. It does not solve buddy punching by itself: a coworker can carry two phones, and a phone left in a truck still reports the truck's location. Pair location with a second check, such as a photo at punch time or a personal PIN, if identity matters to you.

Location also says nothing about the quality of the hours. It tells you where a phone was at two moments, not what the person did between them.

Work through these steps in order, and finish each one before you announce anything to employees:

1. List every site where people clock in, with a street address and a pin dropped on the actual entrance, not the mailing address of the office park.
2. Decide the rule for outside-the-fence punches: hard block, or allow and flag. Start with flag. Blocking on day one turns every GPS glitch into a payroll dispute.
3. Set an initial radius (next section covers how) and save it per site, since a warehouse and a storefront need different sizes.
4. Walk the edge of each fence with two phones, one iPhone and one Android, and punch at the inside edge, the outside edge and deep inside the building.
5. Write down what an employee does when the punch fails: a text to a supervisor, a manual time request, and who approves it within what timeframe.
6. Send employees the written notice, then turn it on.
7. Review the flagged punches weekly for the first month and adjust.

Phone location is an estimate, and it gets less precise indoors, near tall buildings and in basements. If the circle is tighter than the phone's error, honest employees get rejected at their own front door.

Say your shop sits on a lot with a building at the back and parking at the front. A circle that only covers the building will reject people clocking in from the parking spot, where many of them start. Draw the circle to include the parking area and the entrance, then test from the far corner of the lot.

Start generous and tighten later. After two weeks, look at the flagged punches: if most are honest people just outside the line, widen it. If the fence is so wide that it covers the coffee shop next door, shrink it. Large campuses and construction sites usually need a bigger radius than a single storefront, and sites with several buildings sometimes work better as multiple small fences than one huge one.

Location data about employees is sensitive, so set limits before you collect it. Collect location only at the moment of a punch, not continuously in the background, and never track someone after they clock out. Say this in writing.

Some states require you to give employees written notice of electronic monitoring; New York, Connecticut and Delaware are examples, and the rules change, so confirm the current requirements for every state where you have staff. If you use face matching for identity, biometric privacy laws in some states add consent and retention rules of their own. If people use their own phones, check whether your state expects you to reimburse part of the cost.

Finally, remember pay. If a geofence blocks someone from punching and they work anyway, you still owe them for that time under wage-and-hour rules. Your exception process has to capture that time and pay it. Have an employment attorney review the notice and your policy before launch.

These are the failures to plan for before they reach payroll:

• Location permission turned off. The app can't check anything, so the punch fails or gets flagged. Train people to allow location while the app is in use.
• Weak signal indoors. Warehouses, basements and hospitals return poor readings. Test inside, and use a flag instead of a block there.
• Multi-site days. Crews who visit three customers a day need each site saved ahead of time, or a shared "field" fence that a supervisor approves.
• Remote and hybrid staff. A home address is not a work site. Exempt remote employees from the fence rather than tracking their homes.
• Location spoofing apps. Some phones can fake a location. Treat repeated punches from oddly identical coordinates as a reason to look closer, and add photo or PIN checks.